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IN THE CLAIMS 

Please amend the claims as follows: 

I. -8. (cancelled). 

9. (previously amended) A computing device implemented method for executing a split-mask, 
masking countermeasure for improving the resistance, to power analysis attacks, of a 
processing unit of the computing device performing a defined cryptographic function using a 
key, the method comprising the processing unit executing the following steps: 

obtaining the key and a random key mask value r; 

obtaining a set of n random input values mi„l , ... m^n; 

defining a masked function by masking the defined cryptographic function with the value 
m in l A ... A minn; 

masking the key with the random key mask value r to define the value mkey; 
obtaining a set of random split mask values ml, ... mn-1 ; 
defining a split mask value mn to be r A mi„l A . . . A minn A ml A . . . A mn-1 ; and 
using the values ml,. . .,mn and mkey to define input for the masked function. 

1 0. (original) The method of claim 9 in which the encryption function is a table look-up. 

I I . (currently amended) The method of claims 9 or 10 in which masking is a bitwise exclusive 
or operation carried out on binary values. 

12. (previously amended) A computing device implemented method for executing a split-mask, 
masking countermeasure for improving the resistance, to power analysis attacks, of a 
processing unit of the computing device performing a cryptographic function using a key to 
encrypt a plaintext value using a look up on a defined look-up table, the method comprising 
the processing unit executing the following steps: 
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obtaining the key and a random key mask value r; 

defining a value mkey by masking the key with the random key mask value r; 
obtaining a set of n random input values mj„l, . . . m^n; 

defining a masked table by masking the defined look-up table with the value m^l A . . . A mi„n; 

obtaining a set of split mask values comprising random values ml, ... mn-1; 

defining a split mask value mn to be r'tojn 1 A . . . A mj„n A m 1 A . . . A mn- 1 ; and 

masking the plaintext with the split mask values ml,. . .,mn and mkey to define input for the 
masked table, the masked table to be used in place of the defined look-up table in the 
cryptographic operation. 

13. (original) The method of claim 12 in which masking is a bitwise exclusive or operation 
carried out on binary values. 

14. -29. (cancelled). 

30. (previously amended) A computing device program product for improving the resistance, to 
power analysis attacks, of a processing unit using a key to perform a defined cryptographic 
function, the computing device program product comprising a computer usable storage 
medium having computer readable program code means stored in said storage medium, and 
comprising 

program code means for obtaining the key and a random key mask value r, 

program code means for obtaining a set of n random input values mini , . . . m^n, 

program code means for defining a masked function by masking the defined 
cryptographic function with the value mj,, 1 A . . . A mjnn, 1 
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program code means for masking the key with the random key mask value r to define the 
value mkey, 

program code means for obtaining a set of random split mask values ml, . . . mn-1, 

program code means for defining a split mask value mn to be 
r A minl A . . . A minn A ml A . . . A mn-1, and 

program code means for using the values ml,. . .,mn and mkey to define input for the 
masked function. 

3 1 . (original) The computing device program product of claim 30 in which the encryption 
function is a table look-up. 

32. (currently amended) The computing device program product of claims 30 and 3 1 in which 
masking is a bitwise exclusive or operation carried out on binary values. 

33. (previously amended) A computing device program product for improving the resistance, to 
power analysis attacks, of a processing unit performing a cryptographic function using a key 
to encrypt a plaintext value using a look up on a table, the computing device program product 
comprising a computer usable storage medium having computer readable program code 
means stored in said storage medium, and comprising 

program code means for obtaining the key and a random key mask value r, 

program code means for obtaining a set of n random input values mini, . . . m^n, 

program code means for defining a masked table by masking the defined look-up table 
with the value mi„l A . . . A minn, 

program code means for masking the key with the random key mask value r to define the 
value mkey, 

program code means for obtaining a set of random split mask values ml, ... mn-1, 
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program code means for defining a split mask value mn to be 
r A mi„l A . . ^niin^m^. . . A mn-1, and 

program code means for masking the plaintext with the values ml,.. .,mn and mkey to 
define input for the masked table. 

34. (original) The computing device program product of claim 33 in which masking is a bitwise 
exclusive or operation carried out on binary values. 



35.-58. (cancelled) 



